Free
Pay $0
Spend $5
Once, when you sign up. No card.
Start freeYou were invited. Your first payment gets 10% extra.
Pay $100. Spend $175 on security tests.
Incursion by Excession Labs is an AI agent that runs authorized security tests from your terminal. Several hackers work on your target at once, and every finding comes with evidence and a fix.
Install Incursion
$
curl -fsSL https://excessionlabs.ai/install.sh | shA scripted security review
- Incursion plans the work. It splits your request into tasks.
- Several hackers run them at once. Each tool runs on its own, waits for your approval, or is blocked, as you choose.
- Every finding has evidence. A task is done only when each finding links to its evidence.
excession v0.1.51 / 8
╭────────────────────────────────────────────────────────╮ │ ✻ Welcome to excession labs │ │ │ │ /help for help · /agents for assignments │ │ cwd: /private/tmp/api-review-demo │ │ account: demo@example.test · Balance $25.00 │ ╰────────────────────────────────────────────────────────╯ ╭──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮│ > Review the supplied API config and audit evidence. Record configuration risks and a practical remediation order. ││ Stay local; do not probe services. │╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯? for shortcuts deepseek/deepseek-v4.1-flash-1017 · high · Balance $25.00
01 · The briefAsk for a review of sample API configuration and audit logs.
02 · Objectives setThe coordinator sets three objectives: logging, audit coverage, and release controls.
03 · Three hackers, in parallelOpen /agents to see each assignment, its status, and the hacker's latest action.
04 · Inspect the evidenceOpen a hacker to read the file checks behind its conclusions.
05 · Review the risksThe run records two configuration risks, each with a severity and its evidence.
06 · Prioritize the fixesThe final report explains what to change and which control checks passed.
07 · All three hackers finishedEach hacker's notes and findings stay available.
08 · Revisit the resultsUse /results to return to the recorded risks after the review.
sample finding #11 from this runMedium
Request bodies are logged without field redaction
- target
fixtures/api-config.json- category
- Security Misconfiguration
- evidence
body logging: Truesensitive-field redaction: False- fix
- Disable request-body logging and define a redaction allowlist.
- status
- Pending. Retest it in a fresh session, then add it to the report.
One plan for Incursion and your coding agent
Starter
Pay $20 a month
Spend $30
Side projects and CTFs
Choose StarterPro Most popular
Pay $100 a month
Spend $175
Daily work for one person
Choose ProMax
Pay $200 a month
Spend $400
Long runs and large codebases
Choose MaxUltra
Pay $500 a month
Spend $1,250
Many agents in parallel
Choose UltraEvery plan includes
- Incursion, the security agent for your terminal
- API keys for Claude Code, OpenCode, Codex and your own code
- DeepSeek V4.1 Flash Abliterated with a 1M-token context
- New credit every month, for one person
No refusals on authorized work
Incursion takes on the offensive work you are authorized to do, without refusing it: recon, web and API testing, code audit, exploit development, reverse engineering and malware analysis. The Acceptable Use Policy still blocks weapons, CBRN and CSAM.
Questions
Pentesters, red teams, bug bounty hunters and security engineers doing authorized work.
Yes. Create an API key in the console and set it in any tool that accepts an OpenAI or Anthropic base URL. Incursion and your API keys spend the same credit. Setup guides: Claude Code, OpenCode.
DeepSeek V4.1 Flash Abliterated, with a 1M-token context. It runs on your Excession account, so you need no other provider keys.
Plans are monthly and paid by card. You can also add $0.50 to $1,000 to your balance by card or crypto. The balance never expires. The console shows every request and its cost.
Yes. MCP servers, skills, AGENTS.md, hooks, headless runs for CI, and saved sessions are covered in the docs.
Your first $5 is free
Install Incursion
$
curl -fsSL https://excessionlabs.ai/install.sh | sh